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A quantum codeword is a redundant representation of a logical qubit by means of 
several physical qubits. It is constructed in such a way that if one of the physical 
qubits is perturbed, for example if it gets entangled with an unknown environment, 
there still is enough information encoded in the other physical qubits to restore 
the logical qubit, and disentangle it from the environment. The recovery procedure 
may consist of the detection of an error syndrome, followed by the correction of 
the error, as in the classical case. However, it can also be performed by means of 
unitary operations, without having to know the error syndrome. 

Since quantum codewords span only a restricted subspace of the complete physical 
Hilbert space, the unitary operations that generate quantum dynamics (that is, 
the computational process) are subject to considerable arbitrariness, similar to the 
gauge freedom in quantum field theory. Quantum codewords can thus serve as a 
toy model for investigating the quantization of constrained dynamical systems. 

1. Introduction 

In classical communication and computing systems, logical bits, having values or 1, are 
implemented in a highly redundant way by bistable elements, such as magnetic domains. 
The bistability is enforced by coupling the bit carriers to a dissipative environment. Errors 
may then occur, because of thermal fluctuations and other hardware imperfections. To 
take care of these errors, various correction methods have been developed [1], involving 
the use of redundant bits (that are implemented by additional bistable elements). 

In quantum communication and computing, the situation is more complicated: in 
spite of their name, the logical "qubits" (quantum binary digits) are not restricted to the 
discrete values and 1. Their value can be represented by any point on the surface of a 
Poincare sphere. Moreover, any set of qubits can be in an entangled state: none of the 
individual qubits has a pure quantum state, it is only the state of all the qubits together 
that is pure [2]. 
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The qubits of a quantum computer are materialized by single quanta, such as trapped 
ions [3]. Their coupling to a dissipative environment (which was the standard stabilizing 
mechanism for classical bits) is now to be avoided as much as possible, because it readily 
leads to decoherence, namely to the loss of phase relationships. Yet, disturbances due 
to the environment cannot be completely eliminated: e.g., even if there are no residual 
gas molecules in the vacuum of an ion trap, there still are the vacuum fluctuations of 
the quantized electromagnetic field, which induce spontaneous transitions between the 
energy levels of the ions. Therefore, error control is an essential part of any quantum 
communication or computing system. 

This goal is much more difficult to achieve than classical error correction, because 
qubits cannot be read, or copied, or duplicated, without altering their quantum state in 
an unpredictable way [4]. The feasibility of quantum error correction, which for some 
time had been in doubt, was first demonstrated by Shor [5]. As in the classical case, 
redundancy is an essential element, but this cannot be a simple repetitive redundancy, 
where each bit has several identical replicas and a majority vote is taken to establish 
the truth. This is because qubits, contrary to ordinary classical bits, can be entangled, 
and usually they are. As a trivial example, in the singlet state of two spin-| particles, 
each particle, taken separately, is in a completely random state. Therefore, comparing 
the states of spin-| particles that belong to different (redundant) singlets would give no 
information whatsoever. 

All quantum error correction methods [5-9] use several physical qubits for represent- 
ing one logical qubit. These physical qubits are prepared in a carefully chosen, highly 
entangled state. None of these qubits, taken alone, carries any information. However, 
a large enough subset of them may contain a sufficient amount of information, encoded 
in relative phases, for determining and exactly restoring the state of the logical qubit, 
including its entanglement with the other logical qubits in the quantum computer. 

In this article, I review the quantum mechanical principles that make error correction 
possible. (I shall not discuss how to actually design new codewords; the most efficient 
techniques involve a combination of classical coding theory and of the theory of finite 
groups.) Since quantum codewords span only a restricted subspace of the complete phys- 
ical Hilbert space, the unitary operations that generate the quantum dynamical evolution 
(that is, the computational process) are subject to considerable arbitrariness. The latter 
is similar to the gauge freedom in quantum field theory. Quantum codewords can thus 
serve as a simple toy model for investigating the quantization of constrained dynamical 
systems, such as field theories with gauge groups. 



2. Encoding and decoding 

In the following, I shall usually consider codewords that represent a single logical qubit. It 
is also possible, and perhaps it may be more efficient, to encode several qubits into larger 
codewords. However, no new physical principles are involved in this, and the simple case 
of a single qubit is sufficient for illustrating these principles. 

The quantum state of a single logical qubit will be denoted as 



2 



if) = a\0)+(3\l), 



(1) 



where the coefficients a and (3 are complex numbers. The symbols |0) and |1) represent 
any two orthogonal quantum states, such as "up" and "down" for a spin, or the ground 
state and an excited state of a trapped ion. 

In a quantum computer, there are many logical qubits, typically in a collective, highly 
entangled state, and any particular qubit has no definite state. I shall still use the same 
symbol if) for representing the state of the entire computer, and Eq. ([I]) could now be 
written as 

V>=|or)®|0) + |/3)®|1>, (2) 

where one particular qubit has been singled out for the discussion, and the symbols \a) 
and represent the collective states of all the other qubits, that are correlated with |0) 
and |1), respectively. However, to simplify the notation and improve readability, I shall 
still write the computer state as in Eq. (H). In the following, Dirac's ket notation will 
in general not be used for generic state vectors (such as if), a, f3) and the ® sign will 
sometimes be omitted, when the meaning is clear. Kets will be used only for denoting 
basis vectors such as |0) and |1), and their direct products. The latter will be labelled by 
binary numbers, such as 

|9) = |01001) = |0) <g> |1) ® |0) ® |0) <g> |1). (3) 

In order to encode the qubit if) in Eq. (|l]), we intoduce an auxiliary system, called 
ancillaf\ initially in a state 1 000 . . . ). The ancilla is made of n qubits, and we can use the 
mutually orthogonal vectors \a), with a = 0, 1, . . . , 2™ — 1 (the number a being written 
in binary notation) as a basis for its quantum states. These labels are called syndromes, 
because, as we shall see, the presence of an ancilla state with a ^ may serve to identify 
an error in the encoded state that represents if). 

Encoding is a unitary transformation, E, performed on a physical qubit and its ancilla 
together: 

\z)®\a = 0) E (\z) ® \a = 0}) = \Z ), (4) 

where \z) means either |0) or |1). This unitary transformation is executed by a quan- 
tum circuit (an array of quantum gates). However, from the theorist's point of view, it 
is also convenient to consider \z) ® \a = 0) and \Z ) as two different representations of 
the same qubit \z): its logical representation, and its physical representation. The first 
one is convenient for discussing matters of principle, such as quantum algorithms, while 
the physical representation is the one where qubits are actually materialized by distinct 
physical systems (and the latter are the ones that may be subject to independent errors) .Q 

1 This is the Latin word for housemaid. 

2 These two different representations are analogous to the use of normal modes vs. local coordinates for 
describing the small oscillations of a mechanical system [10]. One description is mathematically simple, 
the other one is related to directly accessible quantities. 
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3. Error correction 

If there are 2 n syndromes (including the null syndrome for no error), it is possible to 
identify and correct up to 2™ — 1 different errors that affect the physical qubits, with 
the help of a suitable decoding method, as explained below. Let \Z a ), with a = 0, . . . , 
2™ — 1, be a complete set of orthonormal vectors describing the physical qubits of which 
the codewords are made: |0 ) and |1 ) are the two error free states that represent |0) and 
|1), and all the other |0 o ) and |1 ) are the results of errors (affecting one physical qubit in 
the codeword, or several ones, this does not matter at this stage). These \Z a ) are defined 
in such a way that |0 a ) and |l a ) result from the same errors in the physical qubits of |Oo) 
and |lo) (for example, the third qubit is flipped). We thus have two complete orthonormal 
bases, \z) ® \a) and \Z a ). These two bases uniquely define a unitary transformation E, 
such that 

E(\z)®\a)) = \Z a ), (5) 

and 

E*\Z a ) = \z)®\a), (6) 

where a runs from to 2 n — 1. Thus, E is the encoding matrix, and E^ is the decoding 
matrix. If the original and corrupted codewords are chosen in such a way that E is a 
real orthogonal matrix (not a complex unitary one), then ffl is the transposed matrix, 
and therefore E and E< are implemented by the same quantum circuit, executed in two 
opposite directions. (If E is complex, the encoding and decoding circuits must also have 
opposite phase shifts.) 

The 2 n — 1 "standard errors" \Zq) — > \Z a ) are not the only ones that can be corrected 
by the E* decoding. Any error of type 

\Z )^U\Z ) = Y / c a \Z a ), (7) 

a 

is also corrected, since 

E*Y,Ca\Z a ) = \z)®J2 C *\ a )i ( 8 ) 
a a 

is a direct product of \z) with the ancilla in some irrelevant corrupted state. Note that no 
knowledge of the syndrome is needed in order to correct the error [11]. Error correction 
is a logical operation that can be performed automatically, without having to execute 
quantum measurements. We know that the error is corrected, even if we don't know the 
nature of that error. 

It is essential that the result on the right hand side of (8) be a direct product. Only 
if the new ancilla state is the same for \z) = |0) and \z) = |1), and therefore also for the 
complete computer state in Eq. @, is it possible to coherently detach the ancilla from 
the rest of the computer, and replace it by a fresh ancilla (or restore it to its original state 
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I a = 0) by a dissipative process involving still another, extraneous, physical system) .0 This 
means, in the graphical formalism of quantum circuits, that the "wires" corresponding 
to the old ancilla stop, and new "wires" enter into the circuit, with a standard quantum 
state for the new ancilla. 

There are many plausible scenarios for the emergence of coherent superpositions of 
corrupted states, as in (8). For example, in an ion trap, a residual gas molecule, whose 
wave function is spread over a domain much larger than the inter-ion spacing, can be 
scattered by all the ions, as by a diffraction grating, and then all the ions are left in a 
collective recoil state (namely, a coherent superposition of states where one of the ions 
recoiled and the other ones did not). Furthermore, mixtures of errors of type (8) are also 
corrigible. Indeed, if 



P = Y,PjY, C Ja \ Z *) ( Z b\ 4» 
j ab 



with pj > and J^Pj — 1> then 



EflpE = \z) (z\ ®J2Pil2 c Ja \ a ) ( b \ 4" 



(9) 



(10) 



ab 



again is a direct product of the logical qubit and the corrupted ancilla. 

These mixtures include the case where a physical qubit in the codeword gets entangled 
with an unknown environment, which is the typical source of error. Let r\ be the initial, 
unknown state of the environment, and let its interaction with a physical qubit cause the 
following unitary evolution: 



|0)®77 -> |0)<g>fi+|l)®i/, 
\l)®rj -> |0) <g>a+ |1) ®r, 



IF 



where the new environment states fi, is, a, and r, are also unknown, except for unitarity 
constraints. Now assume that the physical qubit, that has become entangled with the 
environment in such a way, was originally part of a codeword, 

\Z ) = \X zO )0\O) + \X zl )0\l). (12) 
That codeword, together with its environment, thus evolve as 

Z r] -> Z' = X z0 (JO) fi+ |1) v) +X zl (JO) ® a+ |1) ® rj, (13) 
where I have omitted most of the ket signs, for brevity. This can be written as 



Z 1 



X zO 0\O) + X zl |1) 
X zO 0\l) + X zl 0\O) 



fi + r 
2 

v + a 



+ 



X zO 0\O) - X zl 0\l) 
X z0 ® |1) -X gl ® |0) 



T 



2 

v — a 



+ 



(14) 



3 The introduction of a dissipative process in the quantum computer, which essentially is an analog 
device with a continuous evolution, brings it a step closer to a conventional digital computer! 
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On the right hand side, the vectors 



Z = X z0 ® \0) + X zl ® |1), 

Z r = X z0 ®\0) - X zl ®\l), 

Z s = X z0 ® \1) + X zl ® |0>, 

Z t = X zQ ® |l)-X al ®|0), 

correspond, respectively, to a correct codeword, to a phase error (|1) — > — 11)), a bit error 
(|0) «-> |1)), which is the only classical type of error, and to a combined phase and bit 
error. If these three types of errors can be corrected, we can also correct any type of 
entanglement with the environment, as we shall soon see. 

For this to be possible, it is necessary that the eight vectors in Eq. dT5f) be mutually 
orthogonal (recall that the index z means or 1).^ The simplest way of achieving this is 
to construct the codewords |0 ) and |1 ) in such a way that the following scalar products 
hold: 

(X zy , X Z 'y>) = \ 5 ZZ > 5yy>. (16) 

(There are 10 such scalar products, since each index in this equation may take the values 

and 1.) If these conditions are satified, the decoding of Z' by E> gives, by virtue of 
Eq. (§, 

E ] Z' = \z) ® (\a = 0) ® ^ + \r) ® ^ + \s) ® ^ + \t) ® ^) . (17) 

The expression in parentheses is an entangled state of the ancilla and the unknown envi- 
ronment. We cannot know it explicitly, but this is not necessary: it is sufficient to know 
that it is the same state for \z) = |0) or \z) = |1), or any linear combination thereof, as 
in Eq. ([I]). We merely have to discard the old ancilla and bring in a new one. 

How to construct codewords that actually satisfy Eq. ([16]), when any one of their 
physical qubits is singled out, is a difficult problem, best handled by a combination of 
classical codeword theory [1] and finite group theory. I shall not enter into this subject 
here. I only mention that in order to correct an arbitrary error in any one of its qubits, a 
codeword must have at least five qubits: each one contributes three distinct vectors, like 
Z r , Z s , and Z t in Eq. (|15|), and these, together with the error free vector Z , make 16 
vectors for each logical qubit value, and therefore 32 = 2 5 in the total. Longer codewords 
can correct more than one erroneous qubit. For example, Steane's linear code [7], with 
7 qubits, can correct not only any error in a single physical qubit, but also a phase 
error, |1) — > — 11), in one of them, and a bit error, |0) <-> |1), in another one (check! 

1 + 7x3 + 7x6 = 2 7_1 ). A well designed codeword is one where the orthogonal basis 
| Z a ) corresponds to the most plausible physical sources of errors. 

The error correction method proposed above, in Eq. (f|), is conceptually simple, but it 
has the disadvantage of leaving the logical qubit \z) in a "bare" state, vulnerable to new 

4 There is a slight risk of confusion here, because the same symbol refers to the bit-value 0, and to 
the error free state of a codeword. I see no way of circumventing this difficulty without causing further 
confusion. 
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errors that would be not be detected. It is therefore necessary to re-encode that qubit 
immediately, with another ancilla (or with the same ancilla, reset to \a = 0) by interaction 
with still another system). A more complicated but safer method is to bring in a second 
ancilla, in a standard state \b = 0), and have it interact with the complete codeword in 
such a way that 

\Z a ) ® \b = 0) -> \Z Q ) <g> \b = a). (18) 

This is also a unitary transformation, which can be implemented by a quantum circuit. 
Note that now the unitary matrix that performs that error recovery is of order 2 2n+1 , 
instead of 2 n+1 . 

Naturally, errors can also occur in the encoding and decoding process. More sophis- 
ticated methods can however be designed, that allow fault tolerant computation. An 
adaptive strategy is used, with several alternative paths for error correction. Most paths 
fail, because new errors are created; however, these errors can be detected, and there is 
a high probability that one of the paths will eventually lead to the correct result. As a 
consequence, the error correction circuits are able to correct old errors faster than they 
introduce new ones. There is then a high probability for keeping the number of errors 
small enough, so that the correction machinery can successfully deal with them [12]. 



4. Constrained dynamics 

A quantum codeword is a redundant representation of a logical qubit by means of several 
physical qubits. Since quantum codewords span only a restricted subspace of the complete 
physical Hilbert space, the unitary operations that generate quantum dynamics (that is, 
the computational process) are subject to considerable arbitrariness. This is most easily 
seen with the logical representation, \z) <g) \ a — 0). A unitary transformation, 1 ®g, where 
g acts solely on the ancilla's states, generates 

(l<g>0)(|*)<g>|a = O)) = \z) <g>5> a |a). (19) 

a 

This is a corrupted, but corrigible codeword. In the physical representation, this harmless 
unitary transformation becomes 

G = E(l®g)E*. (20) 

The unitary matrices G are a representation (usually a reducible one) of the Un group. 
Consecutive applications of various transformations of this type merely convert one cor- 
rigible error into another corrigible error. These transformations do not mix the two 
complementary subspaces that represent the logical and 1. 

On the other hand, a genuine unitary transformation (one that is actually needed for 
the computation) is, in the logical representation, %j) — > ip' — (u <S> 1)^- It is encoded into 

U = E(u® t)E\ (21) 
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for the physical representation. Thus, in summary, all the "legal" unitary transformations 
are of type E(u® g)E\ for codewords that represent a single logical qubit. 

For unitary transformations involving two logical qubits, the encoded representation, 
including the possibility of corrigible errors, is likewise 

U 12 = (E 1 <g> E 2 ) [u l2 <g> ( 9l <g> g 2 )\ (E\ <g> El), (22) 

where U\ 2 acts on the two logical qubits, and g\ and g 2 act on their respective ancillas. (I 
am assuming here that each logical qubit is encoded separately, and that block coding is 
not used.) It is obvious that in unitary transformations of that type, the logical steps are 
not affected by the occurrence or evolution of corrigible errors. 

Among these unitary transformations, there is a subgroup leaving the zero-syndrome 
ancilla invariant (such a subgroup is called the little group of the invariant state): 

g\a = 0) = \a = 0). (23) 

Let us now focus our attention on these transformations, that do not induce errors in 
correct codewords. They only modify corrupted codewords, while keeping them corrigible. 
We may imagine, if we wish, that error free codewords are stabilized by erecting around 
them a high potential barrier: conceptually, we add to the Hamiltonian a potential term, 
equal to zero for the legal codeword states, and to a large positive number for erroneous 
states. This artifice is similar to, but much simpler than, the use of the quantum Zeno 
effect, that was proposed by several authors as a way of reducing errors. It is actually 
not difficult to devise quantum circuits that act like a potential barrier (the only serious 
difficulty is that such a circuit must activate high frequency interactions with extraneous 
qubits, and the latter may themselves be subject to errors, and induce new ones). 

In the logical basis, a "legal" (error free) state, \z) <S> \a — 0), which is invariant under 
the little group of \a = 0), is recognized as being orthogonal to all \z') ® \a ^ 0). This can 
be written as an orthogonality relation 

(C a ,^)=0, (24) 

where C a is any linear combination of the various \z') ® \a) with a ^ 0. There are 2(2 n — 1) 
linearly independent C a , that span the "illegal" subspace (including incorrigible errors). 
Let us normalize them by (C a , Cp) = 5 a p. After a legal unitary evolution, Uip still is a 
legal state, and therefore 

(C a ,Ui/>)=0. (25) 

It follows that 

UC a = J2 A «p(U)Cp, (26) 

where the matrices A a p(U) are a unitary representation of U. (If all legal U are considered, 
that representation will not, in general, be irreducible.) 
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It is also possible to construct Hermitian operators that express the same constraints. 
Recall that the codewords are defined in a Hilbert space with 2 n+1 dimensions. Now 
consider 

M = y £\C a )M al3 (Cpl (27) 

a/3 

where M a p is any matrix of order 2(2™ — 1). Any legal state obeys Mijj = 0. Another 
constraint (for the same codeword) could be Ni/j = 0, where 

N = ^2\C a )N a p(C p \, (28) 

a/3 

and N aj 3 is any other Hermitian matrix. It is easily shown that 



[M, N] = iP, (29) 

where P is still another Hermitian operator of the same type, and satisfies Pip = for 
all legal states. Finally, we note that if there are many logical qubits in the quantum 
computer, its state obeys the nonlocal "spacelike" constraint equation 



Mi ® N 2 ® • - • V = 0, (30) 

where the various operators refer to different codewords. 

These equations are not completely trivial. They are like those appearing in a quan- 
tum field theory with a gauge group. For example, the canonical momenta of the free 
electromagnetic field are n k = E h , where E is the electric field vector. They satisfy the 
constraint d^ir = 0. This cannot hold as an operator equation, because 9fc7r fc does not 
commute with some other field operators. However, a legal state vector (one without 
"longitudinal photons") obeys the constraint d^^ip = 0. The situation becomes more 
complicated for theories with non-Abelian gauge groups, such as general relativity: singu- 
lar Schwinger terms appear, and the factor ordering problem cannot be discussed without 
regularization.0 

An important problem in quantum field theory (or, in general, in quantum mechanics 
with constrained dynamical variables) is to properly define a Hermitian scalar product. 
Should we include in it the spurious particles that are generated by the gauge freedom, 
such as longitudinal photons? When we consider codewords, the situation becomes simple 
and clear, as we shall now see. 

Consider indeed two different logical states of a quantum codeword, say 

<£ = £(0®]Tc a |a>), (31) 

a 

and 



<F = £(y®5> a |a)). (32) 



3 For a recent review, see ref. [13]. 
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On the left hand side, there is the physical representation of the codeword, and, in the 
parenthesis on the right hand side, its logical representation. Note that, irrespective of the 
logical state ((f) or ip), the ancilla has the same state c a \a), because that state represents 
the syndrome of the error, and the latter, caused by an interaction with the environment, 
is independent of the logical state of the qubit, as may be seen in Eq. flip]). It then readily 
follows from the unitarity of E that the scalar products, 

= (<f>, V»>, (33) 

are the same for any two non-orthogonal states of a logical qubit, and for their represen- 
tation by codewords, even by corrupted ones. Further work is in progress, in order to 
exploit the analogies of quantum codeword dynamics with gauge field theory. 
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